force encrypt to use fingerprint rather than maybe keyid